From: "Gáspár Lajos" <swifty@freemail.hu>
To: Netfilter list <netfilter@vger.kernel.org>
Subject: "invalid packets" and "bad HW ICMP checksum"
Date: Wed, 29 Oct 2008 18:10:03 +0100 [thread overview]
Message-ID: <490898EB.4080307@freemail.hu> (raw)
Hi List,
My firewall logs many of the following packets!
Can anyone help me with it?
I found a similar post:
http://lists.netfilter.org/pipermail/netfilter/2007-July/069183.html
I use REJECT too and have two interfaces but nothing special.
fw01 kernel: nf_ct_icmp: bad HW ICMP checksum IN= OUT=
SRC=87.171.106.238 DST=[EXT_IP] LEN=154 TOS=0x00 PREC=0x00 TTL=56
ID=35986 PROTO=ICMP TYPE=3 CODE=1 [SRC=[EXT_IP] DST=87.171.106.238
LEN=126 TOS=0x00 PREC=0x00 TTL=118 ID=59786 PROTO=UDP SPT=11405
DPT=64067 LEN=106 ]
fw01 kernel: nf_ct_icmp: bad HW ICMP checksum IN= OUT= SRC=70.55.137.237
DST=[EXT_IP] LEN=154 TOS=0x00 PREC=0x00 TTL=35 ID=30825 PROTO=ICMP
TYPE=3 CODE=3 [SRC=[EXT_IP] DST=70.55.137.237 LEN=126 TOS=0x00 PREC=0x00
TTL=108 ID=59731 PROTO=UDP SPT=11405 DPT=25756 LEN=106 ]
fw01 kernel: nf_ct_tcp: invalid packet ignored IN= OUT=
SRC=195.228.240.23 DST=[EXT_IP] LEN=52 TOS=0x00 PREC=0x00 TTL=59
ID=60017 DF PROTO=TCP SPT=80 DPT=59558 SEQ=3345506104 ACK=508060430
WINDOW=33792 RES=0x00 ACK URGP=0 OPT (0101080A2F70DB47013D0A2B)
Swifty
reply other threads:[~2008-10-29 17:10 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=490898EB.4080307@freemail.hu \
--to=swifty@freemail.hu \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.